How to configure MS Internet Explorer proxy settings for a Cisco VPN client

Add the proxy settings to the group policy:

asa(config)# group-policy RA_Policy internal
asa(config)# group-policy RA_Policy attributes
asa(config-group-policy)# msie-proxy server value 192.0.2.200:8080
asa(config-group-policy)# msie-proxy method use-server
asa(config-group-policy)# msie-proxy local-bypass enable
asa(config-group-policy)# msie-proxy except-list value intranet.example.com

Then assign the group policy to the tunnel group:

asa(config)# tunnel-group RA_VPN type remote-access
asa(config)# tunnel-group RA_VPN general-attributes
asa(config-tunnel-general)# default-group-policy RA_Policy

asa(config)# end

asa# wr mem

DNS Filtering

If you don't have a web filtering system, you can prevent users from accessing some web sites using HTTP inspection on ASA/PIX. However, it won't work whether they use HTTPS. So what?

Routing non-contiguous subnets on ASA (without VLSM)

How to route traffic between the wireless LAN and the internal 10.20.20.0/24 network without using VLSM?

Basic anti-spam on ASA

If you want to perform basic anti-spam to block spammers based on domain names, the following policy can help you: